Vulnerability Details CVE-2016-4368
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2016-4368
-
cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.0
-
cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.01
-
cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.10
-
cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.11
-
cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.20
-
cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.21
-
cpe:2.3:a:hp:universal_cmbd_foundation:10.0
-
cpe:2.3:a:hp:universal_cmbd_foundation:10.01
-
cpe:2.3:a:hp:universal_cmbd_foundation:10.10
-
cpe:2.3:a:hp:universal_cmbd_foundation:10.11
-
cpe:2.3:a:hp:universal_cmbd_foundation:10.20
-
cpe:2.3:a:hp:universal_cmbd_foundation:10.21
-
cpe:2.3:a:hp:universal_discovery:10.0
-
cpe:2.3:a:hp:universal_discovery:10.01
-
cpe:2.3:a:hp:universal_discovery:10.10
-
cpe:2.3:a:hp:universal_discovery:10.11
-
cpe:2.3:a:hp:universal_discovery:10.20
-
cpe:2.3:a:hp:universal_discovery:10.21